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CLAIMS: 



1. A method for performing digital right management in a network, the method 
comprising the steps of: 

storing (251), in a first authorised device (211), a master right associated with 
a content, which master right controls what type of access the first authorised device has to 
5 said associated content; 

deriving a subright from the master right, which subright controls what type of 
access a second authorised device (261) is given to said associated content; 
distributing (271) the subright to said second authorised device, given that said second device 
complies with a predetermined distribution criterion associated with the master right 

10 

2. The method according to claim 1, further comprising the step of measuring the 

« 

distance (381) between the first authorised device (311) and the second authorised device 
(361), wherein said predetermined distribution criterion is that the distance between the'first 
authorised device and the second authorised device shall be smaller than a maximum 
1 5 distribution distance. 

3. The method according to claim 1 or 2, further comprising the steps of: 

measuring the distance (481) between the first authorised device (41 1) and the 

second authorised device (461); and 
20 allowing, by means of exercising the subright (462) which has been distributed 

to said second authorised device, the second authorised device access to the associated 
content if the distance between the first authorised device and the second authorised device is 
smaller than a maximum access distance. 

25 4. The method according to any one of claims 1 -3, further comprising the step of 

revoking (581) the subrights (522, 532, 542, 552, 562) derived from the master right (512) 
when said master right exits (571) the network (501). 
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5. The method according to any one of the preceding claims, wherein the first 
authorised device (511) and the second authorised device (521, 531, 541, 551, 561) are 
comprised in an authorised domain (501), and the size of the authorized domain is managed 
by the master right (512). 

6. The method according to claim 5, wherein said first authorised device (511) 
storing the master right (512) manages the authorised domain (501). 

7. The method according to any one of claim 5 or 6, wherein said predetermined 
distribution criterion is that the number of authorised devices (511, 521, 531, 541, 551, 561) 
or persons which are allowed in the authorised domain (501) shall be smaller than a 
maximum domain participant number. 

8. The method according to any one of the preceding claims, wherein the control 
of the type of access that a second authorised device (261) is given to said associated content 

■ 

by a subright, and the predetermined distribution criteria associated with the master right, are 
set by a service provider (22 1 ). 

9. The method according to any one of claims 1-7, wherein the control of the 
type of access that a second authorised device (261) is given to said associated content by a 
subright, and the predetermined distribution criteria associated with the master right, are set 
by the first authorised device (21 1). 

10. The method according to any one of the preceding claims, wherein a content 
quality parameter is set in the subright, which parameter decides the quality with which said 
associated content can be rendered by the second authorised device. 

11. . The method according to any one of the preceding claims, wherein the second 
authorised device (461) further performs the step of: 

contacting the first authorised device (411) storing the master right (412) before exercising 
the subright (462). 

12. A system for performing digital right management, which system comprises: 

a first authorised device (211); 
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a master right associated with a content; and 
a second authorised device (261); wherein 

said first authorised device stores (251) the master right associated with a 
content, derives a subright from the master right and distributes (271) the subright to said 
5 second authorised device (261), given that said second device complies with a predetermined 
distribution criterion associated with the master right; and wherein 

said master right controls what type of access the first authorised device has to 
said associated content and said subright controls what type of access the second authorised 
device has to said associated content. 

10 

13. The system according to claim 12, wherein the first authorised device (311) 
and the second authorised device (361) further comprise means (213, 263) for measuring the 
distance (381) between the first authorised device and the second authorised device; wherein 
said predetermined distribution criterion is that the distance between the first authorised 

1 5 device and the second authorised device shall be smaller than a maximum distribution 
distance. 

14. The system according to claim 12 or 13, wherein the first authorised device 
(411) and the second authorised device (461) further comprise: 

20 means (213, 263) for measuring the distance (481) between the first authorised 

device and the second authorised device; and 

means for allowing, by means of exercising the subright (462) which has been 

distributed to said second authorised device, the second authorised device access to the 

subright, which has been distributed to said second authorised device, and the associated 
25 content if the distance between the first authorised device and the second authorised device is 

smaller than a maximum access distance. 

15. The system according to any one of claims 12-14, further comprising means 
(213, 263) for revoking the subrights (522, 532, 542, 552, 562) derived from the master right 

30 (512) when said master right exits (571) the network (501). 



16. The system according to any one of claims 12-15, wherein the first authorised 

device (511) and the second authorised device (521, 531, 541, 551, 561) are comprised in an 
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authorised domain (501), and the size of the authorized domain is managed by the master 
right (512). 

17. The system according to claim 16, wherein said first authorised device (511) 
5 storing the master right (512) manages the authorised domain (501). 

18. The system method according to any one of claim 16 or 17, wherein said 
predetermined distribution criterion is that the number of authorised devices (51 1, 521 , 531, 
541, 551, 561) or persons which are allowed in the authorised domain (501) shall be smaller 

1 0 than a maximum domain participant number. 

19. The system according to any one of claims 12-18, wherein the control of the 
type of access that a second authorised device (261) is given to said associated content by a 
subright, and the predetermined distribution criteria associated with the master right, are set 

15 by a service provider (221). 

20. The system according to any one of claims 12-18, wherein the control of the 
type of access that a second authorised device (261) is given to said associated content by a 
subright, and the predetermined distribution criteria associated with the master right, are set 

20 by the first authorised device (211). 

21. The system according to any one of claims 12-20, wherein a content quality 
parameter is set in the subright, which parameter decides the quality with which said 
associated content can be rendered by the second authorised device. 

25 

22. The system according to any one of claims 12-21, wherein the second 
authorised device (461) further comprise means (263) for contacting the first authorised 
device (41 1) storing the master right (412) before exercising the subright (462). 



